$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: G0UZweSfBCSYmH9p2tZTt78cPwmz3cJcY3bRYpLnLiI= Subject key identifier: 96:A6:3E:E1:E0:2B:E7:5D:4D:14:C7:81:96:DB:4F:0E:1E:D4:22:E8 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 5EBD0A96C50A6DB681681EAA1B97A50B388CBBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 025D Signing time: Tue 21 May 2024 18:42:09 +0000 Manifest this update: Tue 21 May 2024 18:37:09 +0000 Manifest next update: Wed 22 May 2024 21:02:09 +0000 Files and hashes: 1: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: PegGwAisvX3gWdbPAAYgG4l6LNoFbuBNIzNzUH+jNgg=) 2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: MH5cR2sDAVPfWqRur3ab24Z0Oumi8g+pkHciiPP+8RI=) 3: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 3ZSjlKU0FDu1PfCNIY7S0AH8Mc5qUB/O/qjZ83x1+n4=) 4: 34352e38312e35382e302f32342d3234203d3e2031.roa (hash: 7wqosIaxJiP5Ysu/dd9FrlA3GVYRvUEyoql5Ng1Wlpg=) 5: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: /pglx2sU5jtCytGHT0V5IZzX70yBH2Gm59ZtgUW/WO4=) 6: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: jmfjuQ2LME9LCcB3Ls3X1wO1whmIw278YIL2FglOELk=) 7: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: Gb2rbwC5SwQE4+PWclkn6jTrRvIwMZDTLmgzvBaHDS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 May 2024 14:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bd:0a:96:c5:0a:6d:b6:81:68:1e:aa:1b:97:a5:0b:38:8c:bb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: May 21 18:37:09 2024 GMT Not After : May 22 21:02:09 2024 GMT Subject: CN=96A63EE1E02BE75D4D14C78196DB4F0E1ED422E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:d6:39:56:f6:a5:12:99:46:04:7a:9d:63: 5f:c4:c7:36:25:ca:7d:50:e9:36:83:da:aa:c4:a1: b3:c0:7f:fa:42:23:c6:5a:66:4e:db:8b:7f:79:e6: 79:d6:8e:03:ba:2b:2d:32:da:ba:75:ec:29:a3:d2: f4:1e:3b:e3:c8:a5:78:56:06:9f:c5:9a:da:7d:d1: d2:85:77:7b:ff:7e:5b:64:a5:e2:81:92:5f:fa:6a: 4b:63:3c:e8:af:de:84:98:03:bd:6d:e2:40:72:bb: f7:de:23:d2:8f:dd:89:26:be:9b:35:d7:74:7d:ca: d1:14:90:7f:77:46:5a:78:1c:b6:3e:5f:f9:07:e3: b0:56:be:71:7e:2d:79:a9:1a:af:77:bc:56:f6:9d: f5:75:53:c5:11:e6:3b:11:42:9e:ee:04:69:13:51: 0d:ae:92:07:ca:34:00:a9:cf:99:15:63:ae:66:7b: 36:0b:4c:0b:8e:0d:aa:5e:49:2d:1c:25:6a:7d:47: 35:99:35:be:76:07:38:a8:65:9e:53:ac:c3:13:42: d1:c6:ba:ee:80:94:62:4f:db:1c:39:d8:f9:d2:61: c8:76:8e:23:7d:d6:3c:5b:94:35:1e:36:c4:01:58: e6:ac:7a:c2:9b:21:5f:84:ae:7b:c9:a0:84:e0:a3: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:3E:E1:E0:2B:E7:5D:4D:14:C7:81:96:DB:4F:0E:1E:D4:22:E8 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:40:74:b1:d5:ec:e2:87:8b:03:3a:34:34:06:25:fe:90:00: 56:e5:91:76:55:7d:8d:43:64:55:b5:5e:35:23:ac:65:8f:62: be:20:f3:0c:a0:b5:cf:0b:ed:f0:b7:7d:3e:fb:83:03:fe:81: e1:27:0f:5c:55:11:c0:25:7b:44:c6:a4:b5:c9:14:61:9d:a7: 75:e5:99:94:3e:d5:bd:b8:7b:46:78:1c:2e:9e:5f:e5:0a:fd: 65:35:c0:b0:07:e5:da:35:77:39:89:40:81:44:68:f2:dd:b2: 6d:36:bb:d1:62:db:18:a0:e1:4e:49:56:da:91:36:67:2c:48: 17:62:ae:3c:a2:51:6e:10:6c:2d:1c:f9:fd:96:82:6e:40:05: 79:81:fc:c1:ff:19:d1:d8:3f:0d:39:7f:f1:ef:ae:f6:ba:71: 00:ae:68:4e:95:f0:15:07:76:23:9a:7e:12:2d:35:fa:49:70: 5c:f9:6e:6a:c9:98:bb:0c:37:f7:4a:b7:9a:5d:9e:58:2b:fb: 7f:ea:47:61:1f:9c:3c:c6:06:d4:a3:cd:fb:a6:8f:b6:01:da: ef:b6:7f:b7:22:1c:09:8b:65:97:3c:ca:e0:fc:d1:20:59:50: 37:27:a2:e4:7f:43:6a:a0:2d:ae:e9:62:08:0a:e0:cb:08:e0: fb:7c:ed:78 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXr0KlsUKbbaBaB6qG5elCziMu/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNDA1MjExODM3MDlaFw0yNDA1MjIyMTAyMDlaMDMxMTAvBgNV BAMTKDk2QTYzRUUxRTAyQkU3NUQ0RDE0Qzc4MTk2REI0RjBFMUVENDIyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHdY5VvalEplGBHqdY1/ExzYl yn1Q6TaD2qrEobPAf/pCI8ZaZk7bi3955nnWjgO6Ky0y2rp17Cmj0vQeO+PIpXhW Bp/Fmtp90dKFd3v/fltkpeKBkl/6aktjPOiv3oSYA71t4kByu/feI9KP3Ykmvps1 13R9ytEUkH93Rlp4HLY+X/kH47BWvnF+LXmpGq93vFb2nfV1U8UR5jsRQp7uBGkT UQ2ukgfKNACpz5kVY65mezYLTAuODapeSS0cJWp9RzWZNb52BzioZZ5TrMMTQtHG uu6AlGJP2xw52PnSYch2jiN91jxblDUeNsQBWOasesKbIV+ErnvJoITgo+c/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlqY+4eAr511NFMeBlttPDh7UIugwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0B0sdXs4oeLAzo0NAYl /pAAVuWRdlV9jUNkVbVeNSOsZY9iviDzDKC1zwvt8Ld9PvuDA/6B4ScPXFURwCV7 RMaktckUYZ2ndeWZlD7Vvbh7RngcLp5f5Qr9ZTXAsAfl2jV3OYlAgURo8t2ybTa7 0WLbGKDhTklW2pE2ZyxIF2KuPKJRbhBsLRz5/ZaCbkAFeYH8wf8Z0dg/DTl/8e+u 9rpxAK5oTpXwFQd2I5p+Ei01+klwXPluasmYuww390q3ml2eWCv7f+pHYR+cPMYG 1KPN+6aPtgHa77Z/tyIcCYtllzzK4PzRIFlQNyei5H9DaqAtruliCArgywjg+3zt eA== -----END CERTIFICATE-----Generated at Tue May 21 21:12:34 2024 by rpki-client on console-fra.rpki-client.org